VulnerabilityModified

CVE-2007-5756

Multiple array index errors in the bpf_filter_init function in NPF.SYS in WinPcap before 4.0.2, when run in monitor mode (aka Table Management Extensions or TME), and as used in Wireshark and possibly other products, allow local users to gain privileges…

MEDIUM 6.9EPSS 0.59%

Does this matter?

Lower severity and a low EPSS score (0.59%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
EPSS: 0.59% probability · 46th percentile
CISA KEV: Not listed
Weakness: CWE-129
Affected: winpcap/winpcap
Source: cve@mitre.org

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=625Broken Link
http://secunia.com/advisories/27676Broken Link, Patch, Vendor Advisory
http://www.securityfocus.com/bid/26409Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1018935Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/3835Broken Link
http://www.winpcap.org/misc/changelog.htmRelease Notes
https://exchange.xforce.ibmcloud.com/vulnerabilities/38433Third Party Advisory, VDB Entry
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=625Broken Link
http://secunia.com/advisories/27676Broken Link, Patch, Vendor Advisory
http://www.securityfocus.com/bid/26409Broken Link, Third Party Advisory, VDB Entry
http://www.securitytracker.com/id?1018935Broken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2007/3835Broken Link
http://www.winpcap.org/misc/changelog.htmRelease Notes
https://exchange.xforce.ibmcloud.com/vulnerabilities/38433Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.